Which act first addressed patient information security?

• A. Health Insurance Portability and Accountability Act
• B. Health Information Privacy and Accountability Act
• C. Family Educational Rights and Privacy Act
• D. Gramm-Leach-Bliley Act

Answer: (A)

Protecting patient information at the federal level began with HIPAA. Enacted in 1996, it created the first broad, nationwide framework specifically for health data privacy and security. It established how patient information (PHI) can be used and disclosed (privacy rules) and introduced safeguards for electronic PHI (security rules). The other options address privacy in different areas—education records or financial information—and one is not the official health privacy law. Because HIPAA was the earliest law to address the protection of patient data in healthcare, it is the correct choice.